NEWS BRIEF
What happened
Cloudflare has described a redesigned GeoKey Manager using hybrid ML-KEM-768 and X25519 protection for geographically controlled key use. Its account distinguishes the region where keys may be unwrapped from other decisions about traffic routing, inspection, and plaintext processing. The company says the design replaces an earlier attribute-based encryption approach.
What the announcement does not establish
A regional key-use boundary is not a complete compliance determination. Organizations still need to validate product-specific availability, processing locations, contractual commitments, and their own applicable requirements.
Primary source: Cloudflare: original announcement (2026-10-23). Sources checked November 3, 2026.